Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2F9116FB68935BA8902D23275DB61A08DD00DB40.cer
File:                     2F9116FB68935BA8902D23275DB61A08DD00DB40.cer (raw, json)
Hash identifier:          H/j5aTxrFxRHDIyYtq/4HwOgaYGqaqdHwe5AY5Kk6Xo=
Subject key identifier:   2F:91:16:FB:68:93:5B:A8:90:2D:23:27:5D:B6:1A:08:DD:00:DB:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       71CA61983D009D4AA955DEB45185177C908E0BD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/2F9116FB68935BA8902D23275DB61A08DD00DB40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 19 Aug 2023 11:58:21 +0000
Certificate not after:    Sat 17 Aug 2024 12:03:21 +0000
Subordinate resources:    AS: 28246
                          IP: 187.1.32.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ca:61:98:3d:00:9d:4a:a9:55:de:b4:51:85:17:7c:90:8e:0b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 19 11:58:21 2023 GMT
            Not After : Aug 17 12:03:21 2024 GMT
        Subject: CN=2F9116FB68935BA8902D23275DB61A08DD00DB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:4f:41:9e:cc:52:27:07:df:9b:77:07:01:
                    75:84:2a:7a:2f:bc:8e:97:3b:24:06:ca:09:90:47:
                    d2:21:44:b3:2f:6a:de:f8:ed:25:61:27:bf:e7:db:
                    60:21:a5:30:6d:e7:d8:00:0f:48:da:fd:cd:75:e9:
                    60:15:e7:27:22:8e:4f:3b:e3:17:7e:a5:da:44:38:
                    27:8d:50:87:38:61:d1:64:fe:4e:b4:45:48:39:01:
                    c6:d0:fc:06:df:e5:41:5a:c8:87:5e:09:58:df:dd:
                    99:68:5b:3c:0b:44:ab:99:c8:7d:21:15:38:bd:10:
                    d9:26:61:ac:4c:79:43:e2:8c:3a:32:a2:a1:20:dd:
                    5e:a1:60:61:ae:c6:a8:4c:b8:a8:33:a9:40:99:38:
                    6b:8e:ac:d7:73:ff:60:6c:fc:46:c3:1a:0c:df:2a:
                    c7:66:8c:d6:90:15:a0:fd:e7:8e:9c:6e:1e:29:0e:
                    3d:93:33:c1:2d:29:86:f2:57:41:d1:d6:67:a7:2a:
                    65:84:ad:14:27:8b:49:af:91:c7:36:a4:95:5f:ea:
                    5f:25:49:be:62:17:d4:3a:8e:96:b7:75:84:99:4c:
                    e8:2f:45:f2:db:ac:9b:cd:e8:8e:9f:3f:7d:db:7f:
                    a9:a0:d0:28:1b:99:4d:43:c5:27:df:3b:27:24:51:
                    09:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:91:16:FB:68:93:5B:A8:90:2D:23:27:5D:B6:1A:08:DD:00:DB:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/2F9116FB68935BA8902D23275DB61A08DD00DB40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.32.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28246

    Signature Algorithm: sha256WithRSAEncryption
         7c:29:5b:1e:16:1c:e9:ce:19:b2:d7:45:02:ff:b6:31:61:6e:
         9e:0d:3b:60:eb:ea:53:fe:df:e3:48:13:02:ff:7f:db:c9:27:
         51:7e:a8:c3:ef:40:bc:d4:cf:e7:db:4b:53:1e:c2:b6:90:34:
         ce:21:79:e3:67:0a:67:00:16:d5:0b:f9:c2:bf:7e:8d:fb:c5:
         37:0e:3c:2c:87:e0:f7:48:d6:c7:ec:30:e0:03:b6:60:b8:7a:
         98:68:45:0b:5d:49:c9:eb:ac:70:87:97:fe:7a:4d:74:60:2c:
         0b:94:93:4b:e2:5c:8d:e9:96:9b:b6:a9:8e:0c:3c:a0:40:89:
         a4:5c:ab:b7:f2:1d:b7:c2:ec:b3:76:58:fc:01:c8:08:bb:1a:
         57:db:6c:e1:8c:4b:81:0d:fe:fb:0f:fe:be:0c:92:05:93:f6:
         15:74:7c:ae:f7:0f:09:1e:7e:60:f5:4c:0c:c8:4b:b2:6f:b7:
         ca:93:f0:04:54:c8:a1:bc:51:7e:40:43:ca:20:fa:8b:f5:ce:
         fc:67:f0:54:83:99:cb:a5:1b:b5:d4:65:b8:78:8f:89:3f:9c:
         b8:b9:01:d6:dd:0f:7e:78:fc:11:f1:1d:55:df:d4:56:12:d9:
         7c:46:76:37:fe:ef:0f:1f:ae:21:f3:71:62:48:45:a8:5a:b6:
         e2:aa:6c:9a
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIUccphmD0AnUqpVd60UYUXfJCOC9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzA4MTkxMTU4MjFaFw0yNDA4MTcxMjAzMjFaMDMxMTAvBgNV
BAMTKDJGOTExNkZCNjg5MzVCQTg5MDJEMjMyNzVEQjYxQTA4REQwMERCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9NE9BnsxSJwffm3cHAXWEKnov
vI6XOyQGygmQR9IhRLMvat747SVhJ7/n22AhpTBt59gAD0ja/c116WAV5ycijk87
4xd+pdpEOCeNUIc4YdFk/k60RUg5AcbQ/Abf5UFayIdeCVjf3ZloWzwLRKuZyH0h
FTi9ENkmYaxMeUPijDoyoqEg3V6hYGGuxqhMuKgzqUCZOGuOrNdz/2Bs/EbDGgzf
KsdmjNaQFaD9546cbh4pDj2TM8EtKYbyV0HR1menKmWErRQni0mvkcc2pJVf6l8l
Sb5iF9Q6jpa3dYSZTOgvRfLbrJvN6I6fP33bf6mg0CgbmU1DxSffOyckUQmtAgMB
AAGjggMLMIIDBzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQvkRb7aJNbqJAt
IyddthoI3QDbQDAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9FVHpFQVh4NjRmOUJIVDVOaG1VaWRjcVEyMUJYS2NIZ3Zy
cVhLcnk1bVhFdC8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vRVR6RUFYeDY0ZjlCSFQ1TmhtVWlkY3FRMjFCWEtjSGd2
cnFYS3J5NW1YRXQvMC8yRjkxMTZGQjY4OTM1QkE4OTAyRDIzMjc1REI2MUEwOERE
MDBEQjQwLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS7ASAwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICblYwDQYJKoZIhvcNAQELBQADggEBAHwpWx4WHOnOGbLX
RQL/tjFhbp4NO2Dr6lP+3+NIEwL/f9vJJ1F+qMPvQLzUz+fbS1MewraQNM4heeNn
CmcAFtUL+cK/fo37xTcOPCyH4PdI1sfsMOADtmC4ephoRQtdScnrrHCHl/56TXRg
LAuUk0viXI3plpu2qY4MPKBAiaRcq7fyHbfC7LN2WPwByAi7GlfbbOGMS4EN/vsP
/r4MkgWT9hV0fK73DwkefmD1TAzIS7Jvt8qT8ARUyKG8UX5AQ8og+ov1zvxn8FSD
mculG7XUZbh4j4k/nLi5AdbdD354/BHxHVXf1FYS2XxGdjf+7w8friHzcWJIRaha
tuKqbJo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org